StoneGate IPsec VPN Client Release Notes for Version 4.2.0 Created: July 24, 2008
Table of Contents What s New... 3 System Requirements... 4 Build Version... 4 Compatibility... 4 IPsec Compliance... 4 Installation and Upgrade Instructions... 5 Known Issues... 5
What s New Features StoneGate IPsec VPN Client v4.2.0 is a complete re-write of the IPsec VPN client for StoneGate. It has a new native Windows user interface, and has more comprehensive logging, monitoring, and diagnostics features. This version also supports Windows Vista. The table below provides an overview to the main features of the new version. When upgrading from previous versions, see also the functional changes listed in a separate table. Feature Hybrid and software certificate authentication methods Virtual adapter Support for NAT-T Support for TCP encapsulation Automatic configuration VPN multi-link support Description Hybrid authentication and software certificate based authentication methods are supported. VPN client can communicate through a VPN using a dynamically assigned virtual IP address as the source address. Firewall acts as a DHCP client on behalf of the VPN client and communicates the information back to VPN client. This enables also connections that originate from the site to which the VPN client is connected. Communication through NAT devices can be established according to the NAT-T standard (RFC 3947, RFC 3948). TCP encapsulation can in some cases help in establishing VPN connections from networks with limited connectivity. VPN client configuration is automatically downloaded and updated when the client connects to the gateway. The VPN client can utilize StoneGate multi-link VPN technology for added reliability. Changes Before upgrading to this version, note these changes that may make the existing 2.6.x version configuration partly incompatible with the new version. Change Only software based certificates can be used Client firewall is not included Windows domain logon is not supported Proprietary UDP encapsulation replaced with NAT-T standard Authentication client is not included Description The new version only supports user certificates that are loaded from files. Standard Windows firewall features must be enabled or third party firewall product must be used to secure the client. This version does not support integration with Windows domain logon process. When VPN client communicates through NAT devices, port 4500/UDP must be opened in addition to 500/UDP. Custom ports used by older StoneGate VPN clients (2535/TCP and 2746/UDP) are not used by VPN client version 4.2.0 and newer. The new VPN client does not include the Authentication client feature that was bundled with the older VPN client. If the Authentication client is needed, VPN client version 2.6.2 can be installed on the same host if Authentication client only installation is used. 3 StoneGate IPsec VPN Client Release Notes for version 4.2.0
System Requirements General Requirements Processor: Pentium 4 processor or higher recommended Hard disk space: 300 MB of free disk space Memory: 512 MB Mouse or any pointing device SVGA (800x600) display or higher IPv4 TCP/IP installed and configured Operating Systems Windows XP Professional or Home with service pack 2 Windows Vista Enterprise or Business (no service packs) Build Version The StoneGate IPsec VPN Client v4.2.0 build version is 1032. Compatibility StoneGate IPsec VPN Client v4.2.0 is compatible with StoneGate Firewall/VPN version 4.2.0 and later. IPsec Compliance StoneGate IPsec VPN Client is compliant with IPsec and IKEv1 standards. StoneGate IPsec VPN Client can only be used with StoneGate Firewall/VPN gateway because of the proprietary automatic configuration methods. 4 StoneGate IPsec VPN Client Release Notes for version 4.2.0
Installation and Upgrade Instructions The main installation steps for StoneGate IPsec VPN Client are as follows: 1. If you are running StoneGate VPN client older than 4.2.0, uninstall that version. 2. Ensure you have administrator privileges (or on Vista, that UAC is enabled) and start the installation by running the setup file. If you are installing on a Windows XP system that does not have the Microsoft.NET framework version 2.0 or newer installed, select the installation package that also contains the.net framework. If the StoneGate IPsec VPN client must be installed in silent mode, start the installer from the command line and add options /s /v"/qn" to the command line. 3. Follow the on-screen instructions to complete the installation. 4. Connect to a gateway to get the configuration settings for the VPN client. The detailed installation instructions can be found in the StoneGate IPsec VPN Client User s Guide. For more information on using StoneGate, refer to the Online Help system or StoneGate Administrator s Guide. For background information on how the system works, consult the Reference Guide. Known Issues The current known issues of StoneGate IPsec VPN Client v4.2.0 are described in the table below. For an updated list of known issues, consult our Web site at http://www.stonesoft.com/en/support/index.html/. Synopsis Description Workaround Installation may hang VMware bridged interfaces may not work (#37420) Some third party network security products may cause the VPN client installation to hang. There may be connectivity problems with VMware bridged interfaces when StoneGate IPsec VPN client is installed. If installation does not finish after a few minutes, reboot the client machine without network connections and restart the installation of the VPN client. N/A 5 StoneGate IPsec VPN Client Release Notes for version 4.2.0
Copyright and Disclaimer 2000 2008 Stonesoft Corporation. All rights reserved. These materials, Stonesoft products, and related documentation are protected by copyright and other laws, international treaties and conventions. All rights, title and interest in the materials, Stonesoft products and related documentation shall remain with Stonesoft and its licensors. All registered or unregistered trademarks in these materials are the sole property of their respective owners. No part of this document or related Stonesoft products may be reproduced in any form, or by any means without written authorization of Stonesoft Corporation. Stonesoft provides these materials for informational purposes only. They are subject to change without notice and do not represent a commitment on the part of Stonesoft. Stonesoft assumes no liability for any errors or inaccuracies that may appear in these materials or for incompatibility between different hardware components, required BIOS settings, NIC drivers, or any NIC configuration issues. Use these materials at your own risk. Stonesoft does not warrant or endorse any third party products described herein. THESE MATERIALS ARE PROVIDED "AS-IS." STONESOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO, THE INFORMATION CONTAINED HEREIN. IN ADDITION, STONESOFT MAKES NO EXPRESS OR IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OR USE WITH RESPECT THE INFORMATION CONTAINED IN THESE MATERIALS. IN NO EVENT SHALL STONESOFT BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL OR INCIDENTAL DAMAGES, INCLUDING, BUT NOT LIMITED TO, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING FROM THE USE OF THESE MATERIALS, EVEN IF ADVISED IN ADVANCE OF THE POSSIBILITY OF SUCH DAMAGES. Trademarks and Patents Stonesoft, the Stonesoft logo and StoneGate are all trademarks or registered trademarks of Stonesoft Corporation. Multi-link technology, multi-link VPN, and the StoneGate clustering technology-as well as other technologies included in StoneGate-are protected by patents or pending patent applications in the U.S. and other countries. All other trademarks or registered trademarks are property of their respective owners. Stonesoft Corporation Itälahdenkatu 22A FI-00210 Helsinki Finland Tel. +358 9 476 711 Fax +358 9 4767 1234 Business ID: 0837548-0 Domicile: Helsinki Stonesoft Inc. 1050 Crown Pointe Parkway Suite 900 Atlanta, GA 30338 USA Tel. +1 770 668 1125 Fax +1 770 668 1131 Copyright 2008 Stonesoft Corporation. All rights Reserved. All specifications are subject to change.